Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/37217DB0CC43143DA73E55A45120078A7F6C6B2E.cer
File:                     37217DB0CC43143DA73E55A45120078A7F6C6B2E.cer (raw, json)
Hash identifier:          YCFuWToc83ceUsQ9rEIO6WdXct+OnE9M6aU8exijlBQ=
Subject key identifier:   37:21:7D:B0:CC:43:14:3D:A7:3E:55:A4:51:20:07:8A:7F:6C:6B:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21D15CA973ECB93FADE8C5893DC55D9ECAD729D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/37217DB0CC43143DA73E55A45120078A7F6C6B2E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 20:49:45 +0000
Certificate not after:    Wed 18 Sep 2024 20:54:45 +0000
Subordinate resources:    AS: 270793
                          IP: 201.159.160.0/22
                          IP: 2804:7180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d1:5c:a9:73:ec:b9:3f:ad:e8:c5:89:3d:c5:5d:9e:ca:d7:29:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 20:49:45 2023 GMT
            Not After : Sep 18 20:54:45 2024 GMT
        Subject: CN=37217DB0CC43143DA73E55A45120078A7F6C6B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:b5:e9:59:b8:76:b9:d5:31:6f:91:55:30:
                    7e:16:f5:02:e5:83:45:c5:b1:d3:a3:b1:68:75:8d:
                    4b:08:6c:03:ac:34:b1:b3:72:e2:8f:f7:87:f4:c8:
                    3d:4f:bb:ce:1b:bf:02:f8:b9:e3:4a:fb:c9:19:90:
                    ad:70:ad:5f:67:0e:b6:cc:d0:87:9a:67:42:87:5f:
                    fa:0b:83:70:6e:9b:3b:a4:14:fd:9a:e9:66:a2:4b:
                    12:92:ea:0e:59:95:3d:d4:9f:fb:e0:7f:76:8e:b4:
                    fe:c4:48:cc:2e:f2:87:68:4a:64:14:da:41:4d:6a:
                    2c:c4:a2:cf:a7:7b:61:0b:76:dc:ba:da:0e:c7:db:
                    19:7d:f7:28:82:0d:e1:4d:36:c4:b6:18:90:06:35:
                    ca:d5:ee:87:97:24:97:77:69:69:7e:33:c1:17:67:
                    56:d3:86:2c:be:40:89:44:90:72:88:e7:8e:97:ad:
                    5c:08:70:f4:51:1c:d7:16:bd:9c:58:ff:e3:55:52:
                    4d:88:23:e7:41:0d:1c:2c:b7:ef:f3:fd:f0:bc:d5:
                    72:69:97:d7:b5:3d:82:69:85:82:61:49:69:cd:a6:
                    a0:d1:87:91:50:86:1b:a3:be:f7:69:47:31:a0:5f:
                    5f:97:09:6e:91:22:28:b7:3a:05:7d:25:fb:73:bd:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:21:7D:B0:CC:43:14:3D:A7:3E:55:A4:51:20:07:8A:7F:6C:6B:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/37217DB0CC43143DA73E55A45120078A7F6C6B2E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/22
                IPv6:
                  2804:7180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270793

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:d5:61:67:e5:17:1c:46:ee:70:43:3e:4c:d4:d3:f6:a2:
         9b:51:78:89:ba:ae:f5:83:46:28:7e:83:e0:1a:ee:3a:96:85:
         66:e3:c4:01:e2:1a:62:4e:55:47:bd:7f:da:67:ac:67:4c:3b:
         de:76:f6:0a:b1:12:f4:16:8d:01:7a:16:ea:ac:cc:fb:2b:7a:
         1c:22:41:53:12:20:dd:c0:09:93:ef:43:b1:5b:3b:00:f4:83:
         44:18:fa:0b:9a:0c:2d:e3:51:77:9c:1d:c4:2a:cd:8b:b1:ce:
         af:39:e4:32:0e:56:9d:2e:dc:2e:9f:c3:78:aa:e8:f1:2d:73:
         e1:f4:85:83:b5:d7:2f:3f:bc:b7:05:47:04:1e:32:ed:a2:e4:
         35:fb:e2:11:7f:67:f2:af:63:12:70:d7:9e:7b:95:39:c0:4d:
         a8:e3:0a:ef:ca:7e:b4:f9:de:20:73:96:45:ca:0a:3e:ad:d1:
         51:17:25:9d:f7:64:2f:1c:78:eb:fd:0a:1d:64:2d:76:5c:c8:
         c1:00:bd:e0:12:3e:ce:12:3d:39:01:0d:73:aa:45:5a:ce:55:
         0f:ac:ca:d6:d2:dc:b5:c4:7c:7b:51:af:34:b7:c0:75:f6:a3:
         db:7b:50:e7:9b:bb:bb:69:b2:a7:fa:ab:f8:48:3b:05:60:57:
         89:b7:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org